Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier: BJwu9ckO6E/LN1nwDMAmznvDfAPENzVagp9Q9G5y3Cs=
Subject key identifier: A5:51:0F:6F:26:A5:C9:6E:D9:87:88:84:65:54:72:28:A8:82:9E:49
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial: 0194BCA9F736D80C9907018C0E4BE1274838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number: 0A95
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: Rm2ZLP9U2BFPfas9/LKkBjqEW3g6CGjXgEaU0hgS1Ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:36:d8:0c:99:07:01:8c:0e:4b:e1:27:48:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=a5510f6f26a5c96ed987888465547228a8829e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:f4:58:8c:9d:3a:b6:a5:e7:a6:32:52:0d:
21:01:49:68:36:d6:93:9b:9e:ed:cc:da:74:46:73:
3c:63:d4:d4:af:10:e2:aa:a2:79:82:eb:d0:b0:b1:
44:69:4d:3e:9b:2a:28:cc:50:71:c9:f9:88:f0:0d:
e0:43:b5:a6:2f:ae:a8:52:01:17:53:22:60:fe:45:
f0:7d:be:4a:2d:37:f8:4c:5d:1d:5a:13:d3:ac:74:
15:c2:67:7c:fa:d3:f1:f0:20:02:e4:71:0c:ea:1c:
4f:36:38:41:5d:33:8c:52:dd:bd:77:bf:5b:cc:74:
98:81:b6:39:d7:58:ee:0f:4e:10:bf:12:00:f0:ba:
b6:10:94:84:18:00:40:20:49:09:02:84:ea:75:fc:
70:90:12:51:c3:00:79:33:1d:f5:4a:e3:0b:70:31:
f8:cf:a1:5b:aa:30:ee:3e:ec:40:b5:9c:ec:c8:e7:
29:1a:85:c5:3a:65:26:11:f2:bc:2f:72:42:a1:64:
02:36:9c:4e:66:1f:03:b6:fc:7b:2e:bb:63:97:3d:
ed:ac:b2:2d:06:c6:ad:e0:3a:2c:32:be:29:48:e2:
97:00:34:b4:ef:1e:75:79:5f:ad:78:51:e2:c9:0a:
51:76:4a:5e:e5:f8:53:9c:c5:cc:69:4f:fb:fb:a4:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:0F:6F:26:A5:C9:6E:D9:87:88:84:65:54:72:28:A8:82:9E:49
X509v3 Authority Key Identifier:
keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:76:fc:85:20:43:69:bf:60:d9:36:f4:6b:8f:f6:9a:45:08:
d8:39:83:71:ff:c0:8e:5a:0e:7f:b4:ad:f1:df:4b:14:72:23:
b4:17:d4:ed:07:22:82:3f:22:3a:94:77:2c:fd:c8:a6:0d:0c:
34:0a:c7:c6:fa:86:cd:e7:9b:a8:77:84:0d:1c:54:8a:78:2f:
cb:14:42:b6:8a:e5:39:a8:5e:3a:e9:47:f9:96:fa:1c:ed:ae:
34:9b:ac:89:dc:24:4a:29:74:69:5c:95:ec:93:2b:0e:f7:41:
a5:d1:f4:7d:b7:41:ed:f3:7f:b5:ba:cc:0c:eb:96:03:b5:ca:
70:ab:82:2b:f9:92:2a:0b:ab:6b:ac:91:0f:93:8f:63:04:cd:
b8:07:64:a5:95:43:6f:09:18:35:20:f8:43:2e:00:07:86:fc:
2c:3f:d1:21:e8:34:c7:65:58:df:ae:36:c9:7f:3d:ce:70:2e:
93:e8:05:e3:8c:5d:44:21:08:9a:76:6b:70:4e:be:4a:67:86:
3e:18:be:c1:0f:47:1d:5a:1c:e9:b9:a9:8e:8e:71:c4:ac:b1:
47:5f:ba:fe:2f:cc:58:b7:d1:80:14:ca:2d:47:5c:b3:25:22:
ce:f2:77:cd:81:e9:77:b0:3c:dc:85:d6:70:d8:a9:36:4c:97:
53:c4:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:09 2025 by rpki-client